PastebinEncrypted pastebin — share anything, instantly
Paste text, drop a link or upload an image — it's encrypted in your browser before it ever leaves, and you get one short code that finds and unlocks it. No account, no long URLs.
Encrypted in your browser before upload — we never see your content.
Features
End-to-end encrypted
AES-256 encryption happens in your browser — the server only ever stores ciphertext it can't read.
Password protection
Optionally lock a paste with a password only you and your recipient know.
Self-destructing
Expire links after minutes, hours or days — or burn them after N views.
Share anything
Text, code, links and images — one short URL, no account needed.
How it works
1. Write or upload
Paste text or code, drop in a link, or upload an image. Add an optional title, expiry time, view limit or password.
2. Encrypted in your browser
Your content is encrypted with AES-256 before it leaves your device. The decryption key is derived from your paste code (or password) — it never reaches the server.
3. Share the code
Send the short 10-character code or link to anyone. Only people with the code — and the password, if you set one — can decrypt and read the paste.
Frequently asked questions
Is this pastebin really private?
Yes. Every paste is encrypted with AES-256-GCM in your browser before upload, so the server and database only ever store unreadable ciphertext. The decryption key is derived from your short paste code right in the browser, and the code itself only ever travels in the link fragment (the part after #), which browsers never send to servers — meaning not even the site operator can read your pastes.
Do I need an account to share a paste?
No. There is no sign-up, no login and no tracking. Open the site, paste your content, and share the generated link.
What can I share?
Plain text and code snippets up to about 500 KB, any http(s) link, and images (PNG, JPG, GIF, WebP or SVG) up to 3 MB — all end-to-end encrypted.
How does password protection work?
When you set a password, the encryption key is derived from it using PBKDF2 with 210,000 iterations. Viewers must enter the same password to decrypt the paste in their browser. The password is never sent to the server and cannot be recovered if lost.
How long are pastes stored?
You choose: pastes can live forever, expire after a set time from 5 minutes to 30 days, or burn after a chosen number of views. A view only counts when someone actually decrypts the paste — not when the page merely loads.
What happens when a paste expires or burns?
Once a paste passes its expiry time or reaches its view limit, it can no longer be opened. Visitors see an expired/burned notice instead of the content.